MC1249424 - Microsoft Purview DLP: Unmanaged cloud app protection with Microsoft Purview and the Island Enterprise Browser

Introduction

Microsoft Purview network data security now integrates with Island, extending protection to Island’s browser-based workflows at the point of user interaction. With this integration, new and existing Island customers can configure Microsoft Purview collection and data loss prevention policies to detect and protect data shared with unmanaged cloud apps through the Island Enterprise Browser, the Island Extension, and browser add ins via HTTP and HTTPS, using the same classifiers, sensitive information types, and sensitivity labels used in other Purview policies. Island provides visibility and control at the presentation layer, including typed and pasted input, file transfers, and extension activity, so data can be inspected before it ever leaves the browser.

This integration further enriches Purview Data Security Posture Management (DSPM), Insider Risk Management (IRM) risk score, enables data security and compliance for AI interactions, and more. 

This message is associated with Microsoft 365 Roadmap ID 558437.

When this will happen:

• Public Preview: Rollout will begin in late March 2026 and is expected to complete by late April 2026.
• General Availability (Worldwide): Rollout will begin in late June 2026 and is expected to complete by late July 2026.

How this affects your organization:

Who is affected:

• Organizations using Microsoft Purview
• Customers using or planning to use the Island Enterprise Browser, Island Extension, or supported browser add-ins.
• Microsoft 365 administrators managing Purview collection and DLP policies.

What will happen:

• The Island integration will automatically appear in the Purview DLP Security Store as the feature rolls out.
• The integration is not enabled by default. Administrators must explicitly enable it before it can be used in policies.
• Once enabled, admins can use existing or new Purview collection and DLP policies to inspect and protect data shared through Island-managed browser activity.
• There is no impact to end users unless administrators enable the integration and configure network data security policies in Purview.
• Existing network data security collection and DLP policies will automatically apply if the integration is enabled.

What you can do to prepare:

• Confirm that Purview pay-as-you-go is enabled and configured for your tenant, as it is required to use this integration. Learn more: Enable pay-as-you-go billing for Microsoft Purview.
• Review your existing Purview collection and DLP policies to determine where network-based data inspection may be appropriate.
• Inform other data security and compliance administrators in your organization about this upcoming capability.
• After rollout, enable the Island integration from the Purview DLP Security Store when you are ready to use it.

Learn more:

• Microsoft Purview collection policies
• Microsoft Purview data loss prevention
• Microsoft Purview network data security
• Purview Security Store

Compliance considerations:

Compliance area	Explanation
New customer data processed	When the integration is enabled, browser-based activity metadata and inspection results may be processed as part of Microsoft Purview network data security.
Changes to existing customer data processing	Existing Purview classifiers, sensitive information types, and sensitivity labels are applied to data shared through Island-managed browser workflows.
AI and ML interaction with customer data	The integration supports data security and compliance for AI interactions occurring within browser-based workflows.
Purview DLP and information protection capabilities	Purview collection and DLP policies are extended to inspect and protect data at the browser presentation layer when configured by an administrator.
Admin monitoring and compliance reporting	Signals from browser-based inspections can contribute to Purview Data Security Posture Management and Insider Risk Management insights.
Third-party integration	This change introduces an integration between Microsoft Purview and Island browser technologies.
Admin control	The integration is admin-controlled and must be explicitly enabled from the Purview DLP Security Store.